Beveiligingsadvies

CVE-2019-12405

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-09-09 16:36:25

Laatst bijgewerkt 2024-08-04 23:17:40

Toegewezen door apache

CVSS-score geen score

Status PUBLISHED

Beschrijving

Improper authentication is possible in Apache Traffic Control versions 3.0.0 and 3.0.1 if LDAP is enabled for login in the Traffic Ops API component. Given a username for a user that can be authenticated via LDAP, it is possible to improperly authenticate as that user without that user's correct password.

← Alle CVE's bekijken Bekijk op cve.org ↗